The fastest way to get CISSP Certified. Join our bootcamp
Here’s a question in the style of the Certified Information Security Manager (CISM) exam. Pick your answer before you read on.
An organization is designing its security architecture to support multiple business units with different security requirements. Which approach BEST ensures alignment between security architecture and business objectives?
A. Implement identical security controls across all business units
B. Design a layered defense using defense-in-depth principles
C. Base the architecture on each business unit’s risk profile and requirements
D. Deploy the latest security technologies regardless of cost
Many people with a technical background pick B. Defense in depth is a sound principle, and it’s what they’d build at work tomorrow. A feels like the fair, consistent choice.
The best answer is C.
Defense in depth tells you how to layer controls. It doesn’t tell you which controls each business unit needs, or how much protection is worth paying for. Identical controls everywhere over-protect some units and under-protect others. And buying the latest technology without business context is how security budgets end up spent on the wrong things.
So the security manager starts from the business: what each unit is trying to do and how much risk it can accept. The architecture follows from there.
When you’re stuck between two CISM answers, ask which one starts from the business’s risk rather than the technology. That question settles more of the exam than most people expect.
Questions like this one matter more starting next week. ISACA’s new CISM outline, which takes effect November 3, adds enterprise architecture and information security architecture as content areas. The exam now expects a security manager to help shape architecture decisions, rather than only securing what others have already designed.
Our CISM Bootcamp starts November 3, the day the new outline takes effect, and it’s built on that outline from the ground up. You get four days of live instruction with Kelly Handerhan, working through questions like this one and asking about the ones that don’t click yet. We teach why the best answer is best, so you aren’t memorizing answers you’ll second-guess on exam day.
The lower price is still available. You save $300, which brings the Bootcamp to $1,697 (or $327/month on the payment plan).
Best,
Rob & John
The CISM exam changes November 3. New content areas. Updated outline.
Our CISM Bootcamp is already aligned to the new blueprint. Whatever date you sit, you're preparing for exactly what ISACA tests.
The CISSP CAT Exam Simulator is now available to all students
Included with the CISSP MasterClass and the CISSP Bootcamp.
Students, it's in your dashboard now.
Destination AAISM: The Complete Guide is here
All three AAISM domains covered, built the same way we write our CISSP and CCSP guides: heavy on diagrams, light on filler.
Destination CCSP just got a major update
We've refreshed the guidebook to match the latest exam outline, with AI/ML security now woven through all six domains. Same clear explanations that have helped thousands pass, updated for what ISC2 tests today.